Asseco Poland S.A Mmedica vulnerabilities

CVE-2025-9313 [CRITICAL] CWE-288 CVE-2025-9313: An unauthenticated user can connect to a publicly accessible database using arbitrary credentials. T An unauthenticated user can connect to a publicly accessible database using arbitrary credentials. The system grants full access to the database by leveraging a previously authenticated connection through a "mmBackup" application. This flaw allows attackers to bypass authentication mechanisms and gain unauthorized access to database with sensitive d